1 changes (1 new | 0 updated):

- 1 new CVEs: CVE-2024-11846 - 0 updated CVEs:
CVEProject · Jan 1, 2025 · 275bd11 · 275bd11
1 parent 29ca6e0
commit 275bd11
Show file tree

Hide file tree

Showing 3 changed files with 106 additions and 27 deletions.
diff --git a/cves/2024/11xxx/CVE-2024-11846.json b/cves/2024/11xxx/CVE-2024-11846.json
@@ -0,0 +1,83 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.1",
+    "cveMetadata": {
+        "cveId": "CVE-2024-11846",
+        "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
+        "state": "PUBLISHED",
+        "assignerShortName": "WPScan",
+        "dateReserved": "2024-11-26T20:35:24.978Z",
+        "datePublished": "2025-01-01T06:00:08.702Z",
+        "dateUpdated": "2025-01-01T06:00:08.702Z"
+    },
+    "containers": {
+        "cna": {
+            "providerMetadata": {
+                "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
+                "shortName": "WPScan",
+                "dateUpdated": "2025-01-01T06:00:08.702Z"
+            },
+            "title": "Travel Tour < 5.2.4 - Reflected XSS",
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "description": "CWE-79 Cross-Site Scripting (XSS)",
+                            "lang": "en",
+                            "type": "CWE"
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Unknown",
+                    "product": "TravelTour",
+                    "versions": [
+                        {
+                            "status": "affected",
+                            "versionType": "semver",
+                            "version": "0",
+                            "lessThan": "5.2.4"
+                        }
+                    ],
+                    "defaultStatus": "unaffected"
+                }
+            ],
+            "descriptions": [
+                {
+                    "lang": "en",
+                    "value": "The  does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin"
+                }
+            ],
+            "references": [
+                {
+                    "url": "https://wpscan.com/vulnerability/eedaf2d8-171c-4785-99cc-ab33113308d1/",
+                    "tags": [
+                        "exploit",
+                        "vdb-entry",
+                        "technical-description"
+                    ]
+                }
+            ],
+            "credits": [
+                {
+                    "lang": "en",
+                    "value": "Amine SAJID",
+                    "type": "finder"
+                },
+                {
+                    "lang": "en",
+                    "value": "WPScan",
+                    "type": "coordinator"
+                }
+            ],
+            "source": {
+                "discovery": "EXTERNAL"
+            },
+            "x_generator": {
+                "engine": "WPScan CVE Generator"
+            }
+        }
+    }
+}
diff --git a/cves/delta.json b/cves/delta.json
@@ -1,32 +1,14 @@
 {
-  "fetchTime": "2025-01-01T05:01:09.354Z",
-  "numberOfChanges": 4,
-  "new": [],
-  "updated": [
-    {
-      "cveId": "CVE-2024-12751",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12751",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12751.json",
-      "dateUpdated": "2025-01-01T04:56:28.195Z"
-    },
-    {
-      "cveId": "CVE-2024-12752",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12752",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12752.json",
-      "dateUpdated": "2025-01-01T04:56:26.938Z"
-    },
-    {
-      "cveId": "CVE-2024-12753",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-12753",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/12xxx/CVE-2024-12753.json",
-      "dateUpdated": "2025-01-01T04:56:25.458Z"
-    },
-    {
-      "cveId": "CVE-2024-56337",
-      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-56337",
-      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/56xxx/CVE-2024-56337.json",
-      "dateUpdated": "2025-01-01T04:56:29.394Z"
+  "fetchTime": "2025-01-01T06:01:38.857Z",
+  "numberOfChanges": 1,
+  "new": [
+    {
+      "cveId": "CVE-2024-11846",
+      "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11846",
+      "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11846.json",
+      "dateUpdated": "2025-01-01T06:00:08.702Z"
     }
   ],
+  "updated": [],
   "error": []
 }
diff --git a/cves/deltaLog.json b/cves/deltaLog.json
@@ -1,4 +1,18 @@
 [
+  {
+    "fetchTime": "2025-01-01T06:01:38.857Z",
+    "numberOfChanges": 1,
+    "new": [
+      {
+        "cveId": "CVE-2024-11846",
+        "cveOrgLink": "https://www.cve.org/CVERecord?id=CVE-2024-11846",
+        "githubLink": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/11xxx/CVE-2024-11846.json",
+        "dateUpdated": "2025-01-01T06:00:08.702Z"
+      }
+    ],
+    "updated": [],
+    "error": []
+  },
   {
     "fetchTime": "2025-01-01T05:01:09.354Z",
     "numberOfChanges": 4,